1.3.1

• The HTTP user information in the ASP.NET Core library is now added later, so that we're sure to have it available, even if multiple authentication schemes are used. See also aspnet/Security#1469 .